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IN THE CLAIMS: 

Please amend the claims as follows: 



1 (Currently Amended). A method for dynamically configuring a tunnel 
comprising: 

initiating, by a first peer, a negotiation with a second pee r, the 
negotiation including a plurality of security configuration proposals ; 

sending, by the second peer, information to the first peer; 

extracting, by the first peer, a security configuration selected from 
among the plurality of security configuration proposals firom the information 
sent by the second peer; and 

establishing, using the security configuration, a tunnel between the first 
peer and the second peer. 

2 (Original). The method of claim 1, wherein the negotiation utilizes the 
configuration mode exchange extension of the IPSec protocol. 

3 (Original). The method of claim 1, wherein the establishing a tunnel 
includes conducting a phase2 negotiation in the IPSec protocol. 

4 (Original). The method of claim 1, further comprising initiating, by the first 
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peer, a preliminary negotiation with the second peer. 

5 (Original). The method of claim 4, wherein the initiating a preliminary 
negotiation includes conducting a phase 1 negotiation in the IPSec protocol. 

6 (Currently Amended). A method for dynamically configuring a tunnel 
comprising: 

initiating, by a first peer, a negotiation with a second pee r, the initiating 
comprising offering, by the first peer to the second peer, at least one security 
configuration proposal supported by the first peer, 

wherein the first peer orders offered security configuration proposals in 
a transmission packet such that a more secure security configuration proposal 
is offered before a less secure security configuration proposal ; 

extracting, by the first peer, a selected security configuration fi*om 
information sent by the second peer; and 

establishing, using the security configuration, a tunnel between the first 
peer and the second peer. 

7 (Original). The method of claim 6, wherein the tunnel is an IPSec tunnel. 



8 (Original). The method of claim 6, wherein the negotiation utilizes the 
configuration mode exchange extension of the IPSec protocol. 
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9 (Original). The method of claim 6, wherein the initiating comprises 
requesting, by the first peer, that the second peer send information, the 
information including policy information to define a subsequent negotiation 
between the first peer and the second peer. 

10 (Original). The method of claim 9, wherein the policy information defines 
one or more security associations. 

1 1 (Original). The method of claim 10, wherein the information sent by the 
second peer comprises sets of attributes, the attributes including security 
parameters and network addresses. 

12 (Original). The method of claim 6, wherein the establishing a tunnel 
comprises negotiating, by the first peer with the second peer, to generate a 
secure key. 

13 (Original). The method of claim 12, wherein the negotiating to generate a 
secure key includes conducting a phase2 negotiation in the ff Sec protocol. 



14 (Original). The method of claim 6, wherein the establishing a tunnel 
utilizes the quick mode exchange of the IPSec protocol. 
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15 (Original). The method of claim 6, wherein the IP address of the second 
peer is accessible to the first peer. 

16 (Original). The method of claim 15, wherein a shared secret is stored on 
the first peer before the negotiation. 

17 (Cancelled). 

18 (Cancelled). 

19 (Currently Amended). The method of claim Vf- 6, wherein the pr e liminary 
negotiation utilizes the base mode exchange extension of the IPSec protocol. 

20 (Currently Amended). The method of claim 6, wherein the initiating a 
pr e liminary negotiation further comprises sending, by the first peer to the 
second peer, the identity of the first peer. 

21 (Currently Amended). The method of claim 4-7 6, wherein the initiating a 
pr e liminary negotiation includes conducting a phase 1 negotiation in the IPSec 
protocol. 
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22 (Currently Amended). The method of claim ¥f- 6, wherein the pr e liminary 
negotiation utilizes one of main mode and aggressive mode of the EPSec 
protocol. 



23 (Currently Amended). A method for dynamically configuring a tunnel 
comprising: 

sending, by a second peer, information to a first peer that initiated a 
negotiation with the second peer, the information including a security 
configuration selected firom among a plurality of security configuration 
proposals offered by the first peer int e nd e d to b e e xtract e d by the first p e er ; 
and 

establishing, using the security configuration, a tunnel between the first 
peer and the second peer. 



24 (Cancelled). 



25 (Currently Amended). A system for dynamically configuring a tunnel 
comprising: 

a first peer; and 

a second peer configured to communicate with the first peer over a 
network connection, 

wherein the first peer is configured to initiate a negotiation with the 
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second peer, wherein the negotiation includes a plurality of security 

configuration proposals: 

the second peer is configured to send information to the first peer, 
the first peer is configured to extract a security configuration selected 

from among the plurality of security configuration proposals from the 

information sent by the second peer, and 

the first peer and the second peer are configured to establish a tunnel 

therebetween using the security configuration. 



26 (Original). The system of claim 25, wherein the tunnel is an IPSec tunnel. 



27 (Currently Amended). A computer-readable medium encoded with a 
plurality of processor-executable instruction sequences for: 

initiating, by a first peer, a negotiation with a second pee r, the 
negotiation including a plurality of security configuration proposals ; 

extracting, by the first peer, a security configuration selected from 
among the plurality of security configuration proposals from information sent 
by the second peer; and 

establishing, using the security configuration, a tunnel between the first 
peer and the second peer. 



28 (Original). The computer-readable medium of claim 27, wherein the 
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negotiation comprises a request/reply negotiation, wherein the first peer 
requests that the second peer send the information, and the second peer replies 
to the request by sending the information to the first peer. 

29 (Cancelled). 

30 (Cancelled). 

3 1 (New). The method as recited in claim 1, wherein the first peer orders the 
plurality of security configuration proposals such that a more secure security 
configuration proposal is offered before a less secure security configuration 
proposal. 

32 (New). The method as recited in claim 23, wherein the first peer orders the 
plurality of security configuration proposals such that a more secure security 
configuration proposal is offered before a less secure security configuration 
proposal. 

33 (New). The system as recited in claim 25, wherein the first peer orders the 
plurality of security configuration proposals such that a more secure security 
configuration proposal is offered before a less secure security configuration 
proposal. 
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34 (New). A computer-readable medium as recited in claim 27, wherein the 
first peer orders the plurality of security configuration proposals such that a 
more secure security configuration proposal is offered before a less secure 
security configuration proposal. 



